Forum Discussion
AJ_01_135899
Cirrostratus
CirrostratusSAML SSO - NotBefore Tag?
We're seeing an issue with one of our external SAML SSO SP partners where they require strict adherence to the "NotBefore" attribute in the assertion that's being sent by our IdP.
This value app...
AJ_01_135899Cirrostratus
CirrostratusUTC time sources are indeed abundant, yet certainly there should always be allowances for variation - this could be an issue even if there is drift in the milliseconds.
It looks like this was fixed in 11.4.1 HF4:
http://support.f5.com/kb/en-us/solutions/public/14000/800/sol14835.html
ID 433243 : BIG-IP IdP subtracts three minutes from assertion's NotBefore timestamp to accomodate SPs whose clocks may be behind.
I appreciate the responses.
